CVE-2016-10563

Published May 31st, 2018

View on NVD ↗

CVSS v3

N/A

CVSS v2

6.8

MEDIUM

Affected

PROJECT

Description

During the installation process, the go-ipfs-deps module before 0.4.4 insecurely downloads resources over HTTP. This allows for a MITM attack to compromise the integrity of the resources used by this module and could allow for further compromise.

ipfs-inactive/npm-go-ipfs-dep

DEPRECATED by https://github.com/ipfs/npm-go-ipfs

GitHub